The filescan command displays some warning messages I can't explain:
C:\Micha\Forensics\Volatility-2.2a>python vol.py filescan -f
"D:\X-Ways-Images\Malware\stuxnet.vmem" | egrep -i ".pnf"
Volatile Systems Volatility Framework 2.2_alpha
WARNING : volatility.obj : NoneObject as string: Header not set
...
WARNING : volatility.obj : NoneObject as string: Header not set
0x01dfa028 1 0 R--r-- \Device\HarddiskVolume1\WINDOWS\inf\oem7A.PNF
0x01e0d028 1 0 -WD--- \Device\HarddiskVolume1\WINDOWS\inf\mdmeric3.PNF
WARNING : volatility.obj : NoneObject as string: Header not set
WARNING : volatility.obj : NoneObject as string: Header not set
WARNING : volatility.obj : NoneObject as string: Header not set
0x021b53c8 1 0 RW---- \Device\HarddiskVolume1\WINDOWS\inf\mdmcpq3.PNF
Do I miss something?
CU
Mic
Original issue reported on code.google.com by MichaelF...@gmx.net on 6 Sep 2012 at 1:32
Original issue reported on code.google.com by
MichaelF...@gmx.net
on 6 Sep 2012 at 1:32